Which role is responsible for creating, managing, and deleting user accounts and user groups?

Which role is responsible for creating, managing, and deleting user accounts and user groups?

• A. Account Operator
• B. Access Token
• C. Access Control List (ACL)
• D. Active Desktop

Answer: (A)

In identity and access management, some roles are specifically tied to the lifecycle of user identities. The role that has the authority to create, manage, and delete user accounts and user groups is Account Operators. This role is designed to grant the rights to handle account creation, modification, and removal, as well as managing group membership. It’s focused on day-to-day user and group administration and does not confer broader privileges like altering security policies or other high-level configurations. Other options aren’t roles that perform this kind of administration. An access token is the security context a user obtains after authenticating; it represents what the user is allowed to do, not a role that manages accounts. An Access Control List is a structured list defining who can do what on a given object, not someone who performs account-management tasks. Active Desktop is a legacy UI feature and has no bearing on account management.

In identity and access management, some roles are specifically tied to the lifecycle of user identities. The role that has the authority to create, manage, and delete user accounts and user groups is Account Operators. This role is designed to grant the rights to handle account creation, modification, and removal, as well as managing group membership. It’s focused on day-to-day user and group administration and does not confer broader privileges like altering security policies or other high-level configurations.

Other options aren’t roles that perform this kind of administration. An access token is the security context a user obtains after authenticating; it represents what the user is allowed to do, not a role that manages accounts. An Access Control List is a structured list defining who can do what on a given object, not someone who performs account-management tasks. Active Desktop is a legacy UI feature and has no bearing on account management.